A brand new exploit combining two essential, now-patched safety flaws in SAP NetWeaver has emerged within the wild, placing organizations vulnerable to system compromise and information theft.
The exploit in query chains collectively CVE-2025-31324 and CVE-2025-42999 to bypass authentication and obtain distant code execution, SAP safety firm Onapsis stated.
CVE-2025-31324 (CVSS rating: 10.0) – Lacking
